O
Vendor security profile
openjsf
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical1
CISA KEV0
Public exploit3
Patch rate%47
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
4
2
3
4
2
0
CVE KEV
CVE severity distribution
15toplam CVE
Critical1 (7%)
High12 (80%)
Medium2 (13%)
Patch and exploitation view
%47
Verified patch
%0
CISA KEV
%20
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
7.5
CVE-2026-84394
Vulnerability in Openjsf Fast Uri
O
Patch status unknownEPSS %0
7.5
CVE-2026-84292
Vulnerability in Openjsf Fast Uri
O
Patch status unknownEPSS %0
7.5
CVE-2026-76172
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
F
Patch status unknownEPSS %0
7.5
CVE-2026-75975
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
F
Patch status unknownEPSS %0
7.5
CVE-2026-75899
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
F
Patch status unknownEPSS %0
7.5
CVE-2026-75931
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
F
Patch status unknownEPSS %0
7.5
CVE-2026-18446
Vulnerability in Openjsf Fast Uri
O
Patch verifiedEPSS %0
7.5
CVE-2026-16221
Vulnerability in Openjsf Fast Uri
O
Patch status unknownEPSS %0
5.9
CVE-2026-12590
Resource allocation without limits in Openjsf Body Parser
O
Patch verifiedEPSS %0
7.5
CVE-2026-13676
fast-uri vulnerable to host confusion via failed IDN canonicalization
F
Patch verifiedEPSS %0